← CVE Intelligence

CVE-2026-111472

SQL injection in TSG Profleet PUBLISHED

Description (CNA)

An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sending a GET request using the ‘Identificación’ parameter of the ‘/cgi-bin/index.php’ endpoint.

Affected (CNA)

Vendor / productVersions
TSG / Profleetaffected 0 before 16/10/2026

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.